[squid-users] Secure basic authentication on Squid

Amos Jeffries squid3 at treenet.co.nz
Wed Dec 6 09:58:28 UTC 2017


On 06/12/17 21:32, Mathieu Peltier wrote:
> On Wed, Dec 6, 2017 at 7:01 AM, Jason Haar wrote:
>> To reiterate Alex, "yes you can".
>>
>> Squid supports "proxy over TLS" as well as the old/default "proxy over TCP"
>> - you use the https_port option
>>
>> ...but getting browsers to support it is challenging. The best way would be
>> to create a WPAD file that tells browsers to use "HTTPS" instead of "PROXY".
>> Then you can just use Proxy-Authentication using Basic and you'd be all set.
> 
> Hi,
> Is this secure proxy well supported by other applications than
> browsers in general (eg: wget, curl, yum, git, svn, php, ...)?
> Thanks,
> 

Most of the non-Browser tools have been supporting TLS explicit proxies 
for decades already and have comparativly easy control over it. Browsers 
are the latecomers here.

Amos


More information about the squid-users mailing list